Download - Webcollage.net

PRODUCT LINE
Dynamic Security for the Global Network
Table of Contents
Overview.......................................................................................................................................................................................................................1
Network Security/Firewall Solutions
Network Security Solution Summary.............................................................................................................................................................2
SuperMassive Solutions...........................................................................................................................................................................................2
E-Class Solutions..........................................................................................................................................................................................................4
Branch Office and SMB Solutions......................................................................................................................................................................6
Wireless Enablers...................................................................................................................................................................................................... 12
Subscription Services, Licenses and Firmware....................................................................................................................................... 13
Secure Remote Access Solutions
Secure Remote Access Solution Summary.............................................................................................................................................. 15
E-Class Solutions....................................................................................................................................................................................................... 15
Add-on Features....................................................................................................................................................................................................... 16
SMB and Branch Office Solutions................................................................................................................................................................... 18
Add-on Features: Web Application Firewall, Virtual Assist.............................................................................................................. 19
Anti-Spam/Email and Web Security Solutions
Email Security Solution Summary.................................................................................................................................................................. 21
E-Class Solutions....................................................................................................................................................................................................... 21
SMB Solutions............................................................................................................................................................................................................. 22
Subscription Services............................................................................................................................................................................................. 23
Backup and Recovery Solutions
Backup and Recovery Solution Summary................................................................................................................................................. 24
SMB Solutions............................................................................................................................................................................................................. 25
Licenses and Services............................................................................................................................................................................................ 25
Policy and Management Solutions
Global Management System............................................................................................................................................................................ 27
ViewPoint....................................................................................................................................................................................................................... 27
MySonicWALL............................................................................................................................................................................................................. 27
Global Support Services
E-Class Support 24x7............................................................................................................................................................................................. 28
Dynamic Support 8x5 and 24x7..................................................................................................................................................................... 28
Comprehensive Global Management System Support................................................................................................................... 28
Focused Technical Support................................................................................................................................................................................ 28
Remote Start-up and Configuration Service........................................................................................................................................... 29
Customer Advantage Program
Secure Upgrade Plus.............................................................................................................................................................................................. 29
Customer Loyalty Bundle.................................................................................................................................................................................... 29
Overview
Dynamic Security for the Global Network Our vision is simple: we believe security solutions should be “smart” enough to adapt
as organizations evolve and as threats evolve—dynamically and globally. We believe customers around the world should have the ability to
control, manage and protect their global network easily and automatically. We believe our customers should be able to receive and share threat
and defense data around the world so they can anticipate and stop attacks before they happen. We want our customers to be able to secure any
user, any device, using any application from anywhere so they can collaborate securely across different networks. All this needs to be achieved
with maximum ease of deployment and at the best economic value and in a compliant framework.
Application Intelligence, Control and Visualization SonicWALL Application Intelligence and Control provides granular control and
real-time visualization of applications to guarantee bandwidth prioritization and ensure maximum network security and productivity. A tightly
integrated feature of SonicWALL Next-Generation Firewalls, it uses SonicWALL Reassembly-Free Deep Packet Inspection™ to identify and control
applications, regardless of port or protocol. With a continuously expanding signature database currently recognizing over 3,500 applications and
millions of malware threats, it can maintain granular control over applications, prioritize or throttle bandwidth and deny Web site access. The
SonicWALL Application Flow Monitor provides real-time graphs of applications, ingress and egress bandwidth, active Website connections and
user activity.
Threat Management Internet threats have transformed from mere annoyances to sophisticated malicious attacks that can dramatically
impede business. SonicWALL solutions offer intelligent protection against these intricate and evolving threats by seamlessly integrating network
security, and Web and email security. SonicWALL Network Security provides deep protection against viruses, worms, Trojans, spyware and
intrusions while delivering enterprise-levels of network performance without compromising performance. SonicWALL Web Security provides
greater control to block inappropriate and illegal Web sites as well as to control the use of instant messaging and peer-to-peer applications.
SonicWALL Application Intelligence, Control and Visualization extends control over nonproductive applications like online trading, instant
messaging/chat, peer-to-peer sharing and streaming video sites. SonicWALL Email Security completes the offering with effective protection
against spam and phishing attacks so employees only read legitimate emails and are not exposed to fraudulent emails. SonicWALL’s intelligent
solutions greatly simplify the centralized management of local, remote and mobile network services while protecting key information and
communications resources in a cost-effective manner.
Mobility The ubiquity of mobile technology, the increasingly distributed workforce, smartphones accessing the corporate network, and the
demand for business continuity have made mobility a business imperative. SonicWALL provides organizations of all sizes with mobility solutions
over broadband, wireless and dial-up connections. Integrated with SonicWALL Unified Threat Management protection, SonicWALL network
security provides secure site-to-site connections or secure remote access using IPSec or SSL VPN. Combining these appliances with selfconfiguring SonicPoints instantly provides provisional temporary networks with secure wireless hotspot connectivity. The SonicWALL TZ 200 and
TZ 210 allows temporary sites to establish secure 3G wireless broadband virtually anywhere in an instant without a fixed Internet connection.
Additionally, SonicWALL dedicated SSL VPNs extend secure mobile access to virtually any remote location over standard Web browsers or mobile
devices including wireless PDAs and smartphones. SonicWALL SSL VPN solutions also offer unsurpassed levels of granular access control.
Business Continuity Whether triggered by a major disaster, a flu outbreak or a neighborhood power outage, any disruption to normal
business operations can mean missed opportunities, lost revenue, and a damaged reputation. SonicWALL offers business continuity and recovery
solutions for any size organization. With SonicWALL SSL VPN solutions, isolated workers can remain as productive from home or other contingent
locations as if they were in the office. The SonicWALL Backup and Recovery solution provides automatic, real-time, hands-free disk-based data
backup and flexible disaster recovery options for servers, laptops and PCs. The SonicWALL Continuous Data Protection (CDP) Series protects files
locally as well as at offsite locations to ensure data can be instantly recovered.
Compliance Security threats exist within a network as well. Whether intentionally or accidentally, employees can transmit inappropriate
content, intellectual property or confidential data, resulting in significant damage or breach of industry or government regulations like HIPAA or
Sarbanes-Oxley. Noncompliance may result in fines, executive liability and a damaging loss of credibility. SonicWALL can help any organization
meet mandated regulations, with best-in-class encryption technology and deep packet inspection to ensure “Clean VPN,” connectivity. SonicWALL
SSL VPN solutions offer data encryption and authentication, granular access control, policy management, logging capability and flexible
authentication architecture. SonicWALL Email Security provides easy creation of outbound policies, intelligent identification of noncompliant
emails, robust monitoring and reporting tools, and a range of remediation options. And, SonicWALL Content Filtering Service protects your
network from illicit or unproductive Web content. Finally, the award-winning SonicWALL Global Management System (GMS®) provides
comprehensive audit trails with centralized real-time monitoring, and comprehensive policy and compliance reporting.
Virtualization SonicWALL’s Virtual Appliances bring together the cost and management advantages of virtualization plus the security of
hardened appliance OS to offer improved choice and flexibility for SMBs, enterprises, and Managed Service Providers (MSPs). SonicWALL Virtual
Appliances enable the enterprise to fully capitalize on security solutions while channel partners can deliver virtualized solutions and related
benefits to their customers.
1
3
Network Security/Firewall Solutions
SonicWALL’s
SuperMassive
E10000 Series is a
state-of-the-art
Next-Generation
Firewall engineered
SonicWALL Firewall Network Security
When deployed as a Next-Generation Firewall solution, SonicWALL® firewalls tightly integrate
Reassembly-Free Deep Packet Inspection™ to deliver superior intrusion prevention, malware
protection, application intelligence, control and real-time visualization, and inspection for SSL
encrypted sessions. Essential to an intelligent and highly adaptive security system, SonicWALL
Next-Generation Firewalls scan every byte of every packet for the deepest level of protection and,
unlike competitive offerings, massively scales to extend state-of-the-art security to growing and
distributed enterprise networks. SonicWALL security appliances can also be deployed as Unified
Threat Management (UTM) firewalls that offer comprehensive security combining gateway
content filtering, anti-spam, anti-virus, anti-spyware, intrusion prevention, and application
intelligence and control. SonicWALL is positioned in the Leaders’ Quadrant of the Gartner
Magic Quadrant for UTM.
to provide application
intelligence and control
while defending against
a wide spectrum of
internal and external
network attacks with
unprecedented speed.
SuperMassive E10000 Series At-A-Glance
The SuperMassive E10000 Series is SonicWALL’s Next-Generation Firewall platform designed to
deliver scalability, reliability and deep security at multi-gigabit speeds for large networks. Built to
meet the needs of enterprise, government, university, and service provider deployments, the
SuperMassive E10000 Series is ideal for securing enterprise networks, data centers and server
farms. Combining massively scalable multi-core design and SonicWALL’s patented* ReassemblyFree Deep Packet Inspection technology, the SuperMassive E10000 Series delivers industryleading application control, intrusion prevention, malware protection and SSL inspection.
SuperMassive E10800
n Cores: 96
n Firewall Throughput: 40 Gbps
n Application Inspection Throughput: 30 Gbps n
n
SuperMassive E10400
n Cores: 48
n
n Firewall Throughput: 20 Gbps
n
n Application Inspection Throughput: 15 Gbps
n IPS Throughput: 15 Gbps
IPS Throughput: 30 Gbps
Max Connections: 12.0M
Max Connections: 6.0M
Upgrade Path: Field upgradeable to
the E10800
SuperMassive E10200
n Cores: 24
n Max Connections: 3.0M
n Firewall Throughput: 10 Gbps
n Upgrade Path: Field upgradeable to
n Application Inspection Throughput: 7.5 Gbps the E10400
n IPS Throughput: 7.5 Gbps
SuperMassive E10100
n Cores: 12 (+12 in Integrated HA mode)
n Firewall Throughput: 5.0 Gbps
n Application Inspection Throughput: 4.0 Gbps
*U.S. Patents 7,310,815; 7,600,257; 7,738,380; 7,835,361
4
2
n
n
n
IPS Throughput: 4.0 Gbps
Max Connections: 1.5M
Upgrade Path: Upgradeable to the E10200
Network Security/Firewall Solutions
SuperMassive E10000 Series
Feature
E10100 E10200E10400 E10800
System Specifications
Operating SystemSonicOS
Cores
12 (+ 12 HA)
24
10 GbE Interfaces
1 GbE Interfaces
96
32 GB
64 GB
40 Gbps
16 x 1-GbE SFP
Management Interfaces
Memory (RAM)
48
6 x 10-GbE SFP+
1 GbE, 1 Console
8 GB
16 GB
Storage
80 GB SSD, Flash
Firewall Throughput
5.0 Gbps
10 Gbps
20 Gbps
Application Inspection Throughput
4.0 Gbps
7.5 Gbps
15 Gbps
30 Gbps
IPS Throughput
4.0 Gbps
7.5 Gbps
15 Gbps
30 Gbps
Anti-Malware Inspection Throughput
2.0 Gbps
3.0 Gbps
6.0 Gbps
12 Gbps
VPN Throughput
2.5 Gbps
5.0 Gbps
10 Gbps
20 Gbps
Connections per second80,000/sec
160,000/sec
320,000/sec
640,000/sec
Max. Connections (SPI)1.5M
3.0M
6.0M
12.0M
Max. Connections (DPI)
2.5M
5.0M
10.0M
1.2M
VPN
Site-to-site Tunnels
10,000
10,000 (20,000)*
10,000 (40,000)*
10,000 (80,000)*
IPSec VPN Clients
2,000
2,000 (4,000)*
2,000 (8,000)*
2,000 (16,000)*
SSL VPN Licenses
50 (1,000)*
50 (2,000)*
50 (4,000)*
50 (8,000)*
Encryption
DES, 3DES, AES (128, 192, 256-bit)
Authentication
MD5, SHA-1
Key Exchange
Diffie Hellman Groups 1, 2, 5, 14
Route-based VPN
RIP, OSPF
Networking
IP Address Assignment
Static (DHCP PPPoE, L2TP and PPTP client), Internal DHCP server, DHCP Relay
NAT Modes
1:1, many:1, 1:many, flexible NAT (overlapping Ips), PAT, transparent mode
VLAN Interfaces512
Routing Protocols
OSPF, RIPv1/v2, BGP*, static routes, policy-based routing, multicast
QoS
Bandwidth priority, max bandwidth, guaranteed bandwidth, DSCP marking, 802.1p
Authentication
XAUTH/RADIUS, Active Directory, SSO, LDAP, Novell, internal user database, terminal services, Citrix
IPv6
Yes
VoIP
Full H323-v1-5, SIP
Standards
TCP/IP, ICMP, HTTP, HTTPS, IPSec, ISAKMP/IKE, SNMP, DHCP, PPPoE, L2TP, PPTP, RADIUS, IEEE 802.3
Hardware
Power Supply
Dual, Redundant, Hot Swappable, 850W
Fans
Dual, Redundant, Field Replaceable
Display
Front LCD Display
Input Power
Maximum Power Consumption (W)
100-240 VAC, 60-50 Hz
350 400500 750
Form Factor
4U Rack Mountable
Dimensions
17x18x7 in (43x43.5x17.8 cm)
Weight
58 lb (26.3 kg)
58 lb (26.3 kg)
61 lb (27.7 kg)
67 lb (30.3 kg)
WEEE Weight
59 lb (26.8 kg)
59 lb (26.8 kg)
62 lb (28.1 kg)
68 lb (30.8 kg)
Shipping Weight
79 lb (35.8 kg)
79 lb (35.8 kg)
82 lb (37.2 kg)
88 lb (39.9 kg)
Major Regulatory
Environment
Humidity
FCC Class A, CE, C-Tick, VCCI, Compliance MIC, UL, cUL, TUV/GS, CB, NOM, RoHS, WEEE
40-105 F, 5-40 deg C
10-90% non-condensing
*Available with expanded license.
All specifications, features and availability are subject to change.
3
Network Security/Firewall Solutions
SonicWALL’s enterpriselevel E-Class Network
Security Appliance
(NSA) uses a multi-core
microprocessor that
can run ReassemblyFree Deep Packet
Inspection™ full
throttle without
compromising
network speed.
SonicWALL Enterprise Solutions: E-Class NSA Series At-A-Glance
The SonicWALL E-Class Network Security Appliance (NSA) Series integrates Reassembly-Free
Deep Packet Inspection™ (RFDPI) technology* with multi-core specialized security microprocessors
to deliver intrusion prevention, application intelligence, control and visualization, and anti-malware at
wire speed so you do not have to sacrifice network performance. Combining a powerful deep
packet inspection firewall with multiple layers of protection technology and a suite of high
availability features, the E-Class NSA Series offers the ultimate choice for a variety of enterprise
deployments including distributed environments, campus networks and data centers.
The E-Class NSA appliances, deployed as either Next-Generation Firewalls or as Unified Threat
Management Firewalls, are engineered to be the most scalable, high-performance and
reliable multi-function threat appliances in their class. Taking protection to new levels of control,
application intelligence, control and visualization capabilities offer a complete view into network
traffic and a set of customizable policies affording administrators highly granular control over
applications and users on the network. To meet the operational reliability enterprise-class
networks demand, the E-Class NSA Series incorporates a suite of high availability features at the
hardware and system levels to maximize uptime and improve security coverage. The E-Class NSA
Series lowers management complexity by providing an extensive array of advanced network
configuration features that ease deployment and integration. This makes E-Class NSA an ideal
solution for organizations that require high-performance network security deployed across a wide
variety of environments. The E-Class NSA Series delivers:
Enterprise-class deep packet inspection (DPI) and application intelligence, control and visualization for every packet, every protocol, over every interface
n
Revolutionary multi-core performance utilizing up to 16 cores for high-speed multi-layered threat protection over both external and internal networks
n
Ultimate scalability in eliminating threats across unlimited file sizes and unrestricted concurrent connections by utilizing a Reassembly-Free Deep Packet Inspection engine
n
n
Dynamically updateable and customizable security defense
Flexible yet secure virtual private networking (VPN) technologies include IPSec VPN for site-to-site connectivity and both SSL VPN and IPSec VPN client connectivity to enable secure remote access
n
n
Uncompromising business continuity and high availability protection
*U.S. Patent 7,310,815; 7,600,257; 7,738,380; 7,835,361
4
Network Security/Firewall Solutions
Network Security Solutions—SonicWALL E-Class NSA Series
SonicWALL NSA E8500
The SonicWALL® E-Class Network Security Appliance (NSA) E8500, deployed as either a
Next-Generation Firewall or as a Unified Threat Management Firewall, provides tightly
integrated intrusion prevention, powerful application intelligence, control and visualization,
and sophisticated anti-malware protection. With the patented SonicWALL Reassembly-Free
Deep Packet Inspection™ (RFDPI)* engine, the NSA E8500 can analyze and control over 2,800
applications, even if they are encrypted with SSL. This exceptional combination of software sophistication
and incredibly powerful hardware leaves little room for application traffic to hide on the network,
since SonicWALL’s RFDPI engine is capable of inspecting hundreds of thousands of connections
simultaneously across all ports, with nearly zero latency and without file size limitations.
SonicWALL NSA E7500
The SonicWALL E-Class Network Security Appliance (NSA) E7500, deployed as either a
Next-Generation Firewall or as a Unified Threat Management Firewall, is designed to be a
highly scalable, high-performance and reliable solution. This protection is enabled through
the NSA E7500’s 16-core architecture, a parallel performance design for ultra high-speed threat
protection and deployment scalability. Taking protection to new levels of control, SonicWALL’s
Application Intelligence, Control and Visualization offers a real-time view into network traffic and a
set of customizable policies affording administrators highly granular control over applications and
users on the network. The NSA E7500 comes standard with four gigabit copper Ethernet ports,
four expandable SFP ports for deployment flexibility and an LCD management screen for
instant configuration access. Operational reliability is delivered through a suite of high
availability features at the hardware level with dual power supplies and fans and at the
system level with stateful failover to dramatically improve uptime. The NSA E7500 offers
enterprise customers an extensive array of advanced network and deployment flexibility
features for use in large scale enterprise network deployments.
SonicWALL NSA E6500
The SonicWALL E-Class Network Security Appliance (NSA) E6500, deployed as either a
Next-Generation Firewall or as a Unified Threat Management Firewall, is engineered to meet
the needs of the expanding enterprise network by providing a high-performance and scalable
solution. The NSA E6500 takes advantage of specialized multi-core processing technology,
providing parallel traffic processing, in conjunction with SonicWALL’s Reassembly-Free Deep
Packet Inspection engine. Now enterprise administrators have a high-performance secure
platform to combat the changing threat landscape. Taking protection to new levels of control,
SonicWALL’s Application Intelligence, Control and Visualization offers a real-time view into
network traffic and a set of customizable policies affording administrators highly granular
control over applications and users on the network. The NSA E6500 comes standard with
eight gigabit copper Ethernet ports for deployment flexibility and includes a management
LCD screen for ease of deployment.
SonicWALL NSA E5500
The SonicWALL E-Class Network Security Appliance (NSA) E5500, deployed as either a NextGeneration Firewall or as a Unified Threat Management Firewall, is a high-performance solution
engineered to be the workhorse of the enterprise network environment. Taking advantage of
SonicWALL’s Reassembly-Free Deep Packet Inspection engine and eight-core processor technology
providing parallel traffic processing, the NSA E5500 delivers exceptional deep packet inspection
performance for enterprise networks. Taking protection to new levels of control, SonicWALL’s
Application Intelligence, Control and Visualization offers a real-time view into network traffic and
a set of customizable policies affording administrators highly granular control over applications
and users on the network. The NSA E5500 comes standard with eight gigabit copper Ethernet
ports for deployment flexibility and includes a management LCD screen for ease of deployment.
This solutions offers enterprise network administrators an array of enterprise networking features,
designed to provide lowered management complexity and unrivalled value.
5
Network Security/Firewall Solutions
SonicWALL SMB and Branch Office Solutions: NSA Series At-A-Glance
The SonicWALL Network Security Appliance (NSA) Series combines the patented SonicWALL
Reassembly-Free Deep Packet Inspection™ (RFDPI) engine with a powerful and massively
scalable multi-core architecture to deliver intrusion prevention, gateway anti-virus, gateway
anti-spyware, and application intelligence and control for businesses of all sizes. By integrating
automated and dynamic security capabilities into a single platform, the NSA Series provides
comprehensive protection without compromising performance.
SonicWALL Network Security Appliance 4500
The SonicWALL Network Security Appliance (NSA) 4500 deployed as either a Next-Generation
Firewall or a Unified Threat Management Firewall, is designed to meet the demands of corporate central-site and large distributed environments. Built upon a breakthrough ReassemblyFree Deep Packet Inspection engine and eight-core hardware platform for corporate networks
and distributed environments, the NSA 4500 delivers real-time internal and external network
protection without compromising network performance. The NSA 4500 combines high-speed
intrusion prevention, file and content inspection and powerful application intelligence, control
and visualization capabilities with an extensive array of advanced networking, stateful high
availability and configuration flexibility. With six configurable gigabit Ethernet (GbE) interfaces
and SonicWALL Clean VPN™ technology, the NSA 4500 is an ideal solution for corporate
perimeter protection and remote access connectivity. The NSA 4500 also supports virtual local
area networks (VLANs), enterprise-class routing and QoS features, further extending security
and performance throughout the network.
SonicWALL Network Security Appliance 3500
The SonicWALL Network Security Appliance (NSA) 3500, deployed as either a Next-Generation
Firewall or a Unified Threat Management Firewall, is designed to meet the needs of corporate,
branch office and distributed environments. Utilizing a breakthrough Reassembly-Free Deep
Packet Inspection engine and multi-core hardware design with four cores and six gigabit
Ethernet (GbE) interfaces, the NSA 3500 delivers real-time internal and external network protection
without compromising network performance. The NSA 3500 combines high-speed intrusion
prevention, file and content inspection and powerful application intelligence, control and
visualization capabilities with an extensive array of advanced networking and configuration
flexibility features in an accessible, affordable platform that is easy to deploy and manage in a
wide variety of environments. With its intuitive Web management interface and easy-to-use wizards,
the NSA 3500 simplifies set-up and configuration. The NSA 3500 also supports virtual local area
networks (VLANs), enterprise-class routing and QoS features, further extending security and
performance throughout the network.
SonicWALL Network Security Appliance 2400
The SonicWALL Network Security Appliance (NSA) 2400, deployed as either a Next-Generation
Firewall or a Unified Threat Management Firewall, utilizes a breakthrough multi-core hardware
design and Reassembly-Free Deep Packet Inspection technology with six gigabit Ethernet (GbE)
interfaces to deliver real-time network protection without compromising performance. Designed for small- to medium-sized corporate and branch office networks, the NSA 2400 offers
best-in-class threat prevention, rapid deployment and lowered TCO. The NSA 2400 combines
high-speed intrusion prevention, file and content inspection and powerful application intelligence, control and visualization capabilities with an extensive array of advanced network and
configuration flexibility features in an accessible, affordable platform that is easy to deploy and
manage in a wide variety of environments.
SonicWALL Network Security Appliance 240
The SonicWALL NSA 240, deployed as either a Next-Generation Firewall or a Unified Threat
Management Firewall for small- to medium-sized businesses and branch offices, integrates
gigabit Ethernet (GbE), multi-core hardware and SonicWALL’s Reassembly-Free Deep Packet
Inspection engine for network protection without compromising performance. The NSA 240
combines Clean VPN threat prevention, file and content inspection, application intelligence, control
and visualization, future-proofed extensibility and high availability. Ideal for distributed environments requiring high security, performance, rapid implementation, and lower TCO, the NSA 240
offers advanced networking, multiple WAN redundancy and flexible configuration features in a
cost-effective solution that is easy to deploy and manage.
6
Network Security/Firewall Solutions
SonicWALL Network Security Appliances
Feature
SonicOS Supported
Users and Nodes
Network Interfaces
SonicWALL E-Class Network Security Appliances
NSA 240
NSA 2400
NSA 3500
NSA 4500
NSA E5500
NSA E6500
NSA E7500
NSA E8500
SonicOS
Enhanced 5.6
(or higher)
SonicOS
Enhanced 5.6
(or higher)
SonicOS Enhanced 5.6
(or higher)
SonicOS Enhanced 5.6
(or higher)
SonicOS Enhanced 5.6
(or higher) SonicOS Enhanced 5.6
(or higher) SonicOS
Enhanced 5.6
(or higher)
SonicOS
Enhanced 5.6
(or higher)
UnrestrictedUnrestrictedUnrestrictedUnrestricted
3 GbE/6 FE Copper Ports, (6) 10/100/1000
(6) 10/100/1000 (6) 10/100/1000
1 Console Interface,
Copper Gigabit Copper Gigabit Copper Gigabit
2 USB,
Ports, Ports, Ports, 1 PC Card slot
1 Console Interface, 1 Console Interface, 1 Console Interface, (3G/Modem)
2 USB (Future Use)
2 USB
2 USB
Unrestricted Unrestricted UnrestrictedUnrestricted
(8) 10/100/1000 (8) 10/100/1000 (4) 10/100/1000 Copper (4) 10/100/1000 Copper
Copper Gigabit Ports, Copper Gigabit Ports,
Gigabit Ports and
Gigabit Ports and
1 GbE HA Interface, 1 GbE HA Interface, (4) SFP Ports, 1 GbE HA, (4) SFP Ports, 1 GbE HA,
1 Console Interface, 1 Console Interface, Interface, 1 Console Interface, 1 Console
2 USB
2 USB
Interface, 2 USB
Interface, 2 USB
Power Supply
External 36W
Single 180W ATX Single 180W ATX Single 180W ATX
Single 250W ATX Single 250W ATX Dual 250W ATX,
Dual 250W ATX,
Hot Swappable
Hot Swappable
Cooling System (Fans)
No Fans
2 Fans
2 Fans
2 Fans
VLAN Interfaces
10/25*
25
50
200
High Availability
Active/PassiveActive/PassiveActive/Passive Active/Passive
with Optional
with Optional
with Optional
with State Sync
State Sync
State Sync
State Sync
Dual Fans, Hot Swappable
400
Dual Fans, Hot Swappable
500
Dual Fans, Hot Swappable
Dual Fans,
Hot Swappable
512
512
Active/Passive Active/PassiveActive/PassiveActive/Passive
with State Sync,
with State Sync,
with State Sync,
with State Sync,
Active/Active DPI Active/Active DPI Active/Active DPI Active/Active DPI
with State Sync
with State Sync
with State Sync
with State Sync
Stateful Throughput1
600 Mbps
775 Mbps
1.5 Gbps
2.75 Gbps
3.9 Gbps
5.0 Gbps
5.6 Gbps
8.0 Gbps
3DES/AES Throughput 2
150 Mbps
300 Mbps
625 Mbps
1.0 Gbps
1.7 Gbps
2.7 Gbps
3.0 Gbps
4.0 Gbps
Gateway Anti-Virus Throughput 3
115 Mbps
160 Mbps
350 Mbps
690 Mbps
1.0 Gbps
1.69 Gbps
1.84 Gbps
2.3 Gbps
Intrusion Prevention
Throughput 3
195 Mbps
275 Mbps
750 Mbps
1.4 Gbps
2.0 Gbps
2.3 Gbps
2.58 Gbps
3.5 Gbps
Full DPI Performance 3
110 Mbps
150 Mbps
240 Mbps
600 Mbps
850 Mbps
1.59 Gbps
1.7 Gbps
2.0 Gbps
IMIX Performance 3
195 Mbps
235 Mbps
580 Mbps
700 Mbps
1.1 Gbps
1.4 Gbps
1.6 Gbps
2.0 Gbps
2,000
4,000
7,000
10,000
15,000
20,000
25,000
60,000
Maximum Connections
85,000/110,000*
225,000
325,000
500,000
750,000
1,000,000
1,500,000
3,000,000
Maximum DPI
Connections
32,000/50,000*
125,000
175,000
250,000
500,000
600,000
1,000,000
1,500,000
4,000
6,000
10,000
10,000
New Connections Per Second
Site-to-Site VPNs
25/50*
75
800
1,500
Zone Security
YesYesYesYes
Object-based Management
Yes
Yes
YesYes
YesYesYesYes
YesYesYesYes
Policy-based NATYesYesYesYes
YesYesYesYes
Multiple ISP Failover
YesYesYesYes
YesYesYesYes
Load Balancing YesYesYesYes
YesYesYesYes
Integrated Wireless Switch and Controller
Yes
3G Wireless Failover
Policy-based Routing
Yes
YesYes
YesYesYesYes
Yes
—
YesYes
YesYesYesYes
Yes
Yes
YesYes
Comprehensive
OptionalOptionalOptionalOptional
Anti-Spam Service
YesYesYesYes
OptionalOptionalOptionalOptional
Voice over IP (VoIP)
YesYesYesYes
YesYesYesYes
IKEv2 VPN
YesYesYesYes
YesYesYesYes
Secure Remote Management
(SSHv2 Support)
Yes
Yes
YesYes
YesYesYesYes
SSL VPN and IPSec VPN Remote Access Clients
Yes
Yes
YesYes
YesYesYesYes
Virtual Assist Technicians
30-day Trial
YesYesYes
YesYesYesYes
Route-based VPNYesYesYesYes
YesYesYesYes
TSA User Authentication YesYesYesYes
YesYesYesYes
Dynamic Address Objects
Yes
YesYes
YesYesYesYes
Layer 2 Bridge Mode
YesYesYesYes
YesYesYesYes
802.1q VLANs
Yes
YesYesYesYes
YesYesYesYes
RIPv2 and OSPF Routing
YesYesYesYes
YesYesYesYes
Single Sign-On (SSO)
YesYesYesYes
YesYesYesYes
Application Intelligence
OptionalOptionalOptionalOptional
and Control
OptionalOptionalOptional
Yes
Deep Packet
Inspection SSL
OptionalOptionalOptional
Yes
Optional
Optional
SSL Control
Yes
Yes
YesYes
YesYesYesYes
IPv6 4
YesYesYesYes
YesYesYesYes
Application Visualization
YesYesYesYes
YesYesYesYes
NetFlow/IPFIX
OptionalOptional
YesYesYesYes
YesYesYesYes
Link Aggregation————
Yes 5Yes 5Yes 5Yes 5
Port Redundancy
YesYesYesYes
————
Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated services.
2
VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544.
3
Full DPI/Gateway AV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs.
4
IPv6 functionality requires separate firmware.
5
Static Link Aggregation.
* With Stateful HA and Expansion Upgrade.
1
7
Network Security/Firewall Solutions
SonicWALL SMB and Branch Office Solutions: NSA 2400MX
SonicWALL Network Security Appliance 2400MX
The all-new NSA 2400MX delivers robust, high-performance security on a Unified Threat
Management (UTM) Firewall that features a breakthrough Reassembly-Free Deep Packet Inspection
technology and multi-core hardware design to deliver real-time comprehensive network protection,
high-speed intrusion prevention, file and content inspection, and powerful application intelligence
and control capabilities, all without compromising performance. At the same time, the NSA
2400MX also provides flexible, intelligent switching capabilities with its unique PortShield
architecture, increased port density with 26 interfaces, and advanced switching, routing, networking
and connectivity features. The NSA 2400MX also supports integrated virtual private networks
(VPNs), virtual local area networks (VLANs), standards-based Voice over IP (VoIP), dynamic routing
and Quality of Service (QoS) features, further extending security and performance through the
network environment.
Feature
SonicOS Supported
SonicOS Enhanced 5.7 (or higher)
Users and NodesUnrestricted
Network Interfaces
(16) 10/100, (10) 10/100/1000
Copper Gigabit Ports, 1 Console Interface, 2 USB,
2 Module Slots (For Future Use)
Power Supply
Single 180W ATX
Cooling System (Fans)
2 Fans
Object-based Yes
Management
Policy-based NATYes
Multi-WANYes
Multiple ISP FailoverYes
Load BalancingYes
Integrated Wireless Switch and Controller
Yes
VLAN Interfaces25
High Availability
Optional Active/Passive with State Sync
Policy-based Routing
Yes
Stateful Throughput1
775 Mbps
3G Wireless Failover
Yes
3DES/AES Throughput 2
300 Mbps
Gateway Anti-Virus Throughput 3
160 Mbps
ComprehensiveOptional
Anti-Spam Service
(CASS v.1.0 Only)
Intrusion Prevention
Throughput 3
275 Mbps
IKEv2 VPNYes
UTM Performance 3
150 Mbps
IMIX Performance 3
235 Mbps
Secure Remote Management (SSHv2 Support)
New Connections Per Second
4,000
Voice over IP (VoIP)Yes
Maximum Connections
225,000
Maximum UTM Connections
125,000
Switching Features
SSL VPN and IPSec VPN Remote Access Clients
Yes
Yes
Virtual Assist TechniciansYes
Route-based VPNYes
VLAN Trunking, Rapid Spanning Tree,
Layer 2 Discovery, Link Aggregation, Port Mirroring,
Layer 2 QoS, Rate Control, Port Security
Site-to-Site VPNs75
Bundled Global VPN
Client Licenses (Maximum)
10 (250)
Multiple SSIDs Yes
using VAP
Dynamic Address Objects
Yes
Terminal ServicesYes
User Authentication
802.1q VLANsYes
RIPv2 and OSPF RoutingYes
Bundled SSL VPN Licenses (Maximum)
2 (25)
Bundled Virtual Assist Technicians (Maximum)
1 (5)
Zone SecurityYes
Single Sign-On (SSO)Yes
Application IntelligenceOptional
SSL Control
Yes
IPv6 ReadyYes
Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and
activated services.
VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544.
3
UTM/Gateway AV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools.
Testing done with multiple flows through multiple port pairs.
1
2
8
Network Security/Firewall Solutions
The TZ Series
is the ultimate
total security
platform for distributed
environments,
including remote
and branch offices,
SMBs, and retail/POS
deployments.
SonicWALL Branch Office and SMB Solutions: TZ Series At-A-Glance
By integrating gateway anti-virus, anti-spyware, intrusion prevention, content filtering, anti-spam
and application control, the SonicWALL® TZ Series of Unified Threat Management (UTM) Firewalls
shatters the limitations of stateful packet inspection firewalls by offering high performance
multi-layered network protection. SonicWALL Application Intelligence and Control empowers IT
with highly granular control over applications and users, bandwidth management, easy to use
pre-defined application categories and real-time traffic visualization, regardless of port and
protocol. Utilizing SonicWALL’s unique Reassembly-Free Deep Packet Inspection™ (RFDPI) technology,
the TZ Series delivers in-depth protection at unparalleled performance. The TZ Series also provides
IPSec and SSL VPN remote access, VoIP, and 802.11b/g/n wireless, and 3G wireless failover and
multi-WAN connectivity. Designed for the needs of small businesses, branch offices, distributed
enterprise sites, retailers and managed service providers, the TZ Series supports the highest
speeds available from modern ISPs while delivering full UTM protection.
Every TZ Series appliance packs the benefits of SonicWALL’s SonicOS operating system into an
affordable desktop appliance, providing business-class performance, advanced features and
configuration flexibility. Standard on the TZ 210, TZ 200 and TZ 100 Series, feature-rich SonicOS
Enhanced adds a suite of redundancy, management and wireless LAN features typically
associated with more expensive appliances including ISP failover, load balancing, object/
zone-based management, policy-based NAT, route-based VPN and more.
TZ Series appliances are easily managed remotely as part of a multi-firewall and VPN environment
through a Web interface or using the industry-leading SonicWALL Global Management System (GMS).
Every TZ Series appliance is available as a SonicWALL TotalSecure™ solution, a convenient and
affordable solution that combines the hardware and all the services needed for comprehensive
network protection from a wide range of network threats including viruses, spyware, worms,
Trojans, keyloggers and other malicious threats. Together, these components form a Unified Threat
Management (UTM) Firewall that delivers exceptional security to protect against emerging threats.
SonicWALL TZ 210 Series
The flagship of the revolutionary TZ Series, the TZ 210 Series, deployed as either a Next-Generation
Firewall or Unified Threat Management Firewall, builds upon the TZ 200 and delivers our most
sophisticated and future-proofed TZ Series offering. The TZ 210 infrastructure offers dual Gigabit
Ethernet interfaces for the WAN and the primary LAN that can act independently or as part of the
five-port 10/100 switch. Activating the Comprehensive Gateway Security Suite on the TZ Series
enables powerful application intelligence, control and visualization to provide application-level
access control over Web 2.0 applications such as social networking sites, application inspection,
bandwidth management and throttling and data leakage prevention. The TZ 210 delivers the
extraordinary redundancy and flexibility of dual USB ports for 3G and analog modem failover,
integrated SSL VPN capabilities, as well as the future-proofed speed and powerful protection of 50
Mbps of full Unified Threat Management performance, 40% faster1 than the TZ 200. The TZ 210
Wireless-N also integrates ultra-fast 802.11n wireless LAN capabilities. The TZ 210 is the most
comprehensive network security appliance available to SMBs at a price point under $1,000.
9 11
Network Security/Firewall Solutions
SonicWALL TZ 200 Series
The new TZ 200 Series builds upon the TZ 100 delivering critical business continuity and
flexibility through a host of advanced features. The TZ 200 adds critical failover capabilities that
can provide 24x7 access to keep your organization up and running, with support for USB-based
3G and analog failover and box-to-box failover. Like the TZ 100, the TZ 200 comes pre-bundled
with a single SSL VPN tunnel and is upgradeable to ten. The TZ 200 also adds SonicWALL
Comprehensive Anti-Spam Service including sophisticated per-user mailbox quarantine
capabilities as a complement to UTM, adding customization at a lower cost. The higher-performance
TZ 200 significantly boosts memory and processor power to support all these additional features
while running 40% faster1 than the TZ 100. The TZ 200 Wireless-N version incorporates highspeed 802.11n. The entire TZ 200 Series delivers powerful, enterprise-class features that are
normally only found in enterprise-priced offerings, all available for a low total cost of ownership.
SonicWALL TZ 100 Series
The TZ 100 is the entry point of the fifth-generation TZ Series, making high performance Unified
Threat Management available and affordable for everyone. It features a powerful stateful packet
inspection firewall plus an advanced Reassembly-Free Deep Packet Inspection engine capable
of delivering SonicWALL’s newly expanded comprehensive protection without compromising
network throughput. The TZ 100 provides SMBs and distributed enterprises with a UTM protection
lineup of gateway anti-virus, anti-spyware, intrusion prevention, anti-spam and advanced
content filtering. The TZ 100 Series provides secure remote access by including a single SSL VPN
tunnel that is upgradeable to five along with five configurable 10/100 interfaces. The TZ 100 WirelessN version adds high-speed 802.11n. Plus, all TZ Series appliances support an integrated wireless
switch controller to add managed distributed wireless to any network.
UTM/Gateway AV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done with multiple flows through multiple port pairs.
1
10
Network Security/Firewall Solutions
Feature
Series
TZ 100
Series
TZ 200
Series
TZ 210
Nodes
1UnrestrictedUnrestricted Unrestricted
Network Interfaces
5 Fast Ethernet
1 USB
5 Fast Ethernet,
5 Fast Ethernet, 2 USB
2 Gigabit Ethernet
Stateful Packet Inspection Throughput1
100 Mbps
100 Mbps
200 Mbps
UTM Throughput 3
25 Mbps
35 Mbps
50 Mbps
3DES/AES Throughput 2
75 Mbps
75 Mbps
75 Mbps
Maximum Connections
6,000 12,00030,000
Maximum UTM Connections
6,000 12,00020,000
Site-to-Site VPN Tunnels
5 1015
Remote Access IPSec VPN Tunnels (Max)5
10
Remote Access IPSec VPN Tunnels (Bundled)
2
2
Remote Access SSL VPN Tunnels (Max)5
10
10
Remote Access SSL VPN Tunnels (Bundled)1
1
2
Optional Upgrade
25
Virtual Assist Technicians (Max)N/A 1 2
Virtual Assist Technicians (Bundled)N/A
VLAN Interfaces
0
0
5 1010
Zone Security
YesYesYes
Object-based Management
YesYesYes
Policy-based NAT
YesYesYes
Multiple ISP Failover
YesYesYes
ISP Failover
YesYesYes
Hardware Failover
No
Load Balancing
YesYesYes
Layer 2 Wireless Bridging
YesYesYes
Active/PassiveActive/Passive
Wireless Switch and Controller YesYesYes
Virtual Access Points (VAPs)Yes 4Yes 4Yes 4
Integrated Access Point
Optional 802.11n
Optional 802.11n
Optional 802.11n
Comprehensive Anti-Spam ServiceOptional Optional Optional
Voice over IP (VoIP)
YesYesYes
PortShield Security
YesYesYes
Route-based VPN
YesYesYes
3G Wireless Failover
N/AYesYes
Bandwidth Management
YesYesYes
Application Intelligence and ControlNo
No
Yes
Application Visualization
No NoYes
NetFlow/IPFIX
Yes 5Yes 5Yes
Testing Methodologies: Maximum performance based on RFC 2544 (for firewall). Actual performance may vary depending on network conditions and activated
services.
2
VPN throughput measured using UDP traffic at 1280 byte packet size adhering to RFC 2544.
3
UTM/Gateway AV/Anti-Spyware/IPS throughput measured using industry standard Spirent WebAvalanche HTTP performance test and Ixia test tools. Testing done
with multiple flows through multiple port pairs.
4
Virtual Access Points (VAPs) are supported on the integrated wireless radio only.
5
Please consult latest release notes for availability.
1
11
Network Security/Firewall Solutions
SonicWALL Clean Wireless Solution
SonicWALL makes wireless networking secure, simple and affordable with the innovative
SonicWALL® Clean Wireless Solution—the first total security solution that integrates 802.11n
and 802.11a/b/g wireless management with best-in-class Unified Threat Management (UTM)
security and application intelligence, control and visualization to provide application based
policy control. SonicWALL SonicPoint-Ni and SonicPoint-Ne Dual-Band wireless access point
devices and SonicWALL Power over Ethernet (PoE) Injectors complement our award-winning
line of firewall appliances to flexibly extend comprehensive security across wireless networks.
The SonicWALL Clean Wireless solution goes beyond mere secure wireless solutions by
making wireless networks as secure as wired networks using deep packet inspection, delivering
dual protection to secure the wireless network by encrypting wireless traffic and decontaminating
it from network threats while also protecting the network from wireless attacks. The SonicPoint-Ni
and SonicPoint-Ne are access points that are utilized to provide seamless, secure wireless LAN
(WLAN) connectivity as well as advanced features and services. SonicWALL lowers total cost of
ownership (TCO) by enabling administrators avoid implementing and separately managing an
expensive wireless-specific solution that runs in parallel to their existing wired network.
SonicPoint-Ne Dual-Band
SonicWALL SonicPoint-Ne Dual-Band access points integrate 802.11a/b/g/n management and
enforcement features with Reassembly-Free Deep Packet Inspection, for flexible deployment
into SonicWALL Clean Wireless networks. Flexible deployment options include both 802.3af
Power over Ethernet (PoE), where an electrical outlet is not readily available, and direct power
through an AC adapter. Ideal for hospitals or clinics, professional offices and other deployment
scenarios that require discreet wireless deployment with light and logo covers, silent
operation and controllable LED (except power).
SonicPoint-Ni Dual-Band
SonicWALL SonicPoint-Ni Dual-Band access points integrate 802.11a/b/g/n management and
enforcement features with Reassembly-Free Deep Packet Inspection technology to secure
highly discreet SonicWALL Clean Wireless network environments. Ideal for hospitals or
clinics, professional offices and other deployment scenarios that require discreet wireless
deployment with internal antennas, light and logo covers silent operation and controllable
LED (except power).
PoE Injector
The SonicWALL PoE Injector is an IEEE 802.3af compliant power injector featuring an advanced
auto-sensing algorithm that automatically detects the presence of PoE-compatible devices
and “injects” the appropriate power into the data cable. A plug-and-play device, the PoE
Injector fits easily into wireless Ethernet infrastructures and requires no configuration or
management.
12
Network Security/Firewall Solutions
GAV/
Anti-Spyware/
IPS
Content
Filtering
Service
Enforced Client
Anti-Virus and
Anti-Spyware
Advanced Security Services for Network Security Solutions
SonicWALL Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application
Intelligence and Control Service
SonicWALL Gateway Anti-Virus, Anti-Spyware, Intrusion Prevention, Application Intelligence and
Control Service delivers intelligent, real-time network security protection against a comprehensive
array of dynamic threats including viruses, spyware, worms, Trojans and software vulnerabilities
such as buffer overflows, as well as backdoor exploits and other malicious code. As an added
layer of security, this powerful solution provides application layer attack protection not only
against external threats, but also against those originating inside the network. SonicWALL
Gateway Anti-Virus, Anti-Spyware and Intrusion Prevention Service closes potential backdoors by
inspecting over a multitude of email, Web, file transfer and stream-based protocols as well as
instant messaging (IM) and peer-to-peer (P2P) applications. SonicWALL Application Intelligence
and Control provides granular control and real-time visualization of applications to guarantee
bandwidth prioritization and ensure maximum network security and productivity.
SonicWALL Content Filtering Service
SonicWALL Content Filtering Service (CFS) provides businesses and schools with greater
control to transparently enforce productivity and protection policies and block inappropriate,
illegal and dangerous Web content. Featuring a dynamic rating and caching architecture,
SonicWALL CFS blocks multiple categories of objectionable Web content, providing the ideal
combination of control and flexibility to ensure the highest levels of productivity and protection.
SonicWALL Enforced Client Anti-Virus and Anti-Spyware
and SonicWALL Client/Server Anti-Virus Suite
SonicWALL Enforced Client Anti-Virus and Anti-Spyware provides comprehensive virus
and spyware protection with little administrative overhead. Developed in partnership with
McAfee®, this product delivers enforced and auto-updated endpoint protection through
automatic system-wide updates of virus definitions and software, eliminating machine-bymachine deployments. Combining the enforced client product with advanced server protection,
SonicWALL Client/Server Anti-Virus Suite leverages the award-winning McAfee VirusScan
Enterprise for Windows® and GroupShield for Exchange anti-virus protection for Windows-based
file, print, message and exchange servers. SonicWALL anti-virus solutions reduce the time and
costs associated with administering an anti-virus policy throughout your entire network.
SonicWALL Comprehensive Anti-Spam Service
SonicWALL Comprehensive Anti-Spam Service (CASS) offers small- to medium-sized businesses
comprehensive protection from spam and viruses, instantly deployed over existing SonicWALL
network security appliances. CASS speeds deployment, eases administration and reduces
overhead by consolidating solutions, providing one-click anti-spam services, with advanced
configuration in just ten minutes.
SonicWALL DPI SSL
SonicWALL Deep Packet Inspection of SSL-encrypted traffic (DPI SSL) transparently decrypts and
scans both inbound and outbound HTTPS traffic using SonicWALL RFDPI. The traffic is then
re-encrypted and sent to its original destination if no threats or vulnerabilities are discovered.
SonicWALL Virtual Assist
SonicWALL Virtual Assist is a remote support tool that enables a technician to assume control
of a customer’s PC or laptop in order to provide technical assistance. With the customer’s
permission, the technician can gain instant access to the computer using a Web browser,
making it easy to diagnose and fix a problem remotely. The easy-to-use customer Web portal
provides a familiar look and feel for both Windows and Mac customers. Furthermore, the
technician and standalone client facilitates the management and scheduling of the support
queue. SonicWALL Virtual Assist allows tight integration by leveraging existing network and
authentication infrastructures.
13
Network Security/Firewall Solutions
Global
VPN Client
Software for Network Security Appliance
SonicWALL VPN Clients
For remote client-to-host secure access, SonicWALL offers both SSL VPN and IPSec VPN
connectivity options. For SSL VPN, SonicWALL NetExtender allows for clientless remote access
for Windows, Mac and Linux-based systems utilizing a Web portal to provide connectivity and
access. For IPSec VPN, SonicWALL Global VPN Client enables the client system to download the
VPN client for a more traditional client-based VPN experience.
Firmware for Network Security Appliance
SonicOS Enhanced Firmware
SonicOS Enhanced is the powerful next-generation operating system from SonicWALL,
integrating a host of advanced features to meet the business continuity, configuration
flexibility and management requirements of complex networks today and into the future.
SonicOS
Enhanced
14
Secure Remote Access Solutions
SonicWALL Secure
Remote Access
delivers granular
access control
while remaining
SonicWALL Secure Remote Access Solutions
The traditional corporate LAN is evolving into a distributed global network that connects
employees, partners and customers over multiple Internet, intranet, extranet and VoIP
channels. The modern mobile workforce demands more solutions for secure access to more
resources from more remote devices including smartphones and platforms than ever before.
SonicWALL provides scalable Secure Remote Access solutions to fit every organization—from
small- to medium-sized businesses to large global enterprises. SonicWALL Aventail E-Class SSL
Secure Remote Access Series and SonicWALL Secure Remote Access Series for the SMB deliver
flexible solutions for secure remote access, disaster recovery, wireless networking and secure
extranets, and can be deployed as hardware or a virtual appliance.
easy-to-use and
manage for the
enterprise.
SonicWALL Aventail E-Class SRA Series At-A-Glance
SonicWALL Aventail E-Class Secure Remote Access (SRA) Series increases productivity with its easy-to-use
access capability and reduce IT overhead costs by enforcing granular control while being easy to
manage. Recognized by top analysts as an industry leader, SonicWALL Aventail’s award-winning SSL
VPNs answer the secure remote access needs of today’s increasingly mobile enterprise. Offering a
single, centrally-managed gateway or a virtual appliance in a VMWare® environment to control
access to network resources, SonicWALL Aventail SRA appliances deliver robust solutions by providing:
Secure remote access to mission-critical applications and resources from a wide range of endpoint device platforms, including Macintosh®, Linux®, Google® Android, Microsoft® Windows 7 and Microsoft® Windows Mobile
n
n
Clientless browser access or Web-delivered thin client access for an “in-office” experience
n
Business continuity and disaster recovery during unexpected disruptions
n
Centralized secure access control for wireless networks supporting multiple device platforms
n
Secure access to business partner extranets to enhance collaborative productivity
n
Policy enforcement across disparate entry points, allowing granular access control
Even greater control over portal access, content and design with the newly-enhanced SonicWALL
Workplace Portal
n
Enhanced security that detects inherent risks of an endpoint prior to authentication; protects resources with granular policy based on that user and endpoint; and then connects the user only to authorized resources
n
Recurring End Point Control scans at user login and administrator-defined intervals to ensure ongoing endpoint integrity
n
Unsurpassed levels of granular control that enforces access based on the trust for the user, the trust for the device used for access and the applications that the user needs to access.
n
n
A solid foundation for Network Access Control (NAC) today and in the future
Secure Remote Access Solutions — SonicWALL Aventail E-Class SRA Series
SonicWALL Aventail E-Class SRA EX7000
The SonicWALL Aventail E-Class SRA EX7000 is a clientless SSL VPN solution that delivers secure,
easy-to-manage remote access control for the mobile enterprise, supporting up to 5,000 concurrent
users from a single appliance. The EX7000 increases user productivity and maximizes IT control by
providing authorized access to any application from a broad range of cross-platform devices.
SonicWALL Aventail E-Class SRA EX6000
The SonicWALL Aventail E-Class SRA EX6000 is a clientless SSL VPN solution that delivers secure,
easy-to-manage remote access control for mid-size companies and enterprise departments that
require up to 250 concurrent users. The EX6000 provides easy secure access to more applications
from more devices and locations, while ensuring easy administrative control through one gateway,
reducing deployment and management costs.
15
Secure Remote Access Solutions
E-Class Secure Remote Access
Virtual Appliance
SonicWALL Aventail E-Class SRA Series At-A-Glance
E-Class Secure Remote Virtual Appliance
SonicWALL Secure Remote Appliance
The SonicWALL® Aventail® E-Class Secure Remote Access Virtual Appliance is a hardened,
performance-optimized virtual server for full-featured and easy-to-manage clientless secure
remote access for mobile enterprise organizations, supporting up to 50 concurrent users from
a single virtual appliance. These solutions increase user productivity and maximize IT control
by providing authorized access to any application from a broad range of cross-platform
devices.
Optional SonicWALL Aventail E-Class Add-on Features
SonicWALL Aventail Advanced End Point Control (EPC)™
Advanced EPC combines the most advanced end point detection with the most advanced data protection.
SonicWALL Aventail Advanced Reporting™
Advanced Reporting delivers powerful analysis of remote access to your resources.
Advanced
Reporting
SonicWALL Aventail Connect Mobile™
Connect Mobile offers true “in-office” experience for PDA devices.
SonicWALL Aventail Native Access Modules™
Native Access Modules allow native protocol access to server-based applications.
Native Access
Modules
Spike License
Pack
Virtual Assist
16
SonicWALL Aventail Spike License™
Spike License is a disaster recovery “insurance policy” for future increases in remote users.
SonicWALL Virtual Assist
A remote support tool enabling remote technical assistance.
Secure Remote Access Solutions
Feature
EX6000EX7000
Concurrent User License
25 to 250
Basic End Point Control (EPC) Interrogation IncludedIncluded
Advanced EPC (Anti-Virus, Personal Firewall, Anti-Spyware
Add-OnIncluded
50 to 5,000
Aventail Secure Desktop /Cache Cleaner
Add-OnIncluded
Allow, Deny and Quarantine Zones based on EPC interrogation
IncludedIncluded
Granular Access Control (User & Group, Source IP, Service/Port, Destination URL,
Host Name/IP Address, IP range, Subnet, Domain)
IncludedIncluded
Advanced Reporting
Add-OnAdd-On
WorkPlace Portal
IncludedIncluded
WorkPlace Mobile (optimized portal for mobile phone browsers)
IncludedIncluded
Native Access Modules (Citrix and Windows Terminal Services)
Add-OnIncluded
Connect Tunnel (Windows, Mac and Linux access to TCP or UDP based applications)
IncludedIncluded
Connect Mobile (Windows Mobile)
Add-OnIncluded
17
Secure Remote Access Solutions
SonicWALL SSL VPN
offers affordable,
easy-to-use and
manage secure
remote access.
SonicWALL Secure Remote Access Solutions for SMB and Branch Offices At A Glance
SonicWALL’s Secure Remote Access (SRA) Series provides organizations of any size with an
affordable, easy-to-use and manage secure clientless remote network and application access
solutions that require no pre-installed client software. Utilizing only a standard Web browser,
users can easily and securely access email, files, intranets, applications, remote desktops, servers
and other resources on the corporate LAN from any location. SonicWALL SSL VPN solutions
integrate seamlessly into virtually any wired or wireless network topology to deliver powerful,
scalable and affordable remote access to corporate resources. SonicWALL Secure Remote
Access Series is available as an appliance or as a virtual appliance in a VMWare® environment.
Clientless connectivity removes the need for a pre-installed VPN client, thus freeing administrators from a tedious and costly task.
n
Seamless integration behind virtually any firewall enables organizations to leverage the existing network infrastructure.
n
Remote support using SonicWALL Virtual Assist enables technicians to provide secure on-demand assistance to customers while leveraging the existing infrastructure.
n
(SRA 1200, SRA 4200)
n Virtual Access enables authorized end users in distributed enterprises and service provider organizations to gain secure remote access to their unattended Windows-based computers from anywhere.
SonicWALL’s Web Application Firewall Service detects and protects Web applications (including the SSL VPN appliance itself) from Web-based attacks, reducing potential losses and adhering to data protection compliance mandates.
n
Granular policy configuration controls enable network administrators to create policies
that “lock down” a user to specific applications/resources and prevent unauthorized access
to them.
n
Tokenless two-factor authentication provides enhanced protection against key loggers
by combining a unique one-time password, generated by the SSL VPN appliance and
sent to a remote user’s mobile device or email address, with the user’s network user name and password.
n
Mobile device support to access an entire intranet as well as Web-based applications provides greater flexibility for a remote workforce.
n
Application offloading allows users to securely access Web applications while leveraging strong authentication and granular access policy features.
n
Clean VPN is enabled when deployed alongside a SonicWALL network security appliance which utilizes powerful deep packet inspection technology to scan traffic for malicious threats such as viruses, worms, Trojans and spyware.
n
SonicWALL SRA 4200
The SonicWALL Secure Remote Access (SRA) 4200 provides medium-sized organizations
with a powerful, easy-to-use and cost-effective secure remote access solution that requires
no pre-installed client software. Utilizing only a standard Web browser, users can easily and
securely access email, files, intranets, applications, remote desktops, servers and other
resources on the corporate LAN from any location. The SRA 4200 with its hardware assisted
SSL offload functionality can support a large number of remote access users, as well as
supporting value-added services for allowing remote PC support, remote PC access and Web
Application Firewall.
SonicWALL SRA 1200
The SonicWALL Secure Remote Access (SRA) 1200 provides small- to medium-sized businesses
easy-to-use secure remote access to corporate email, files and Web-based applications
without pre-installed clients. Integrating seamlessly into virtually any network topology, the
SRA 1200 delivers affordable yet powerful remote access, remote support, remote PC control
and Web Application Firewall.
18
Secure Remote Access Solutions
SonicWALL Secure Remote Access Solutions for SMB and Branch Offices At A Glance
Secure Remote Virtual Appliance
SonicWALL Secure Remote Appliance
The SonicWALL® Secure Remote Access Virtual Appliance provides small- to medium-sized
businesses with a hardened, performance-optimized virtual server for clientless remote access
to business applications and resources, including email, files, intranets, Web-based and legacy
applications, desktops and servers from more OS platforms, including Windows®, Windows
Mobile, Mac®, Linux® and Android®.
Optional SonicWALL SSL VPN Add-on Features
SonicWALL Web Application Firewall Service
SonicWALL Web Application Firewall Service (WAF), a complete, affordable, out-of-box
compliance solution, leverages your existing infrastructure as a licensable add-on module
to the SonicWALL Secure Remote Access platform. Utilizing a dynamically updated signature
database to detect sophisticated Web-based attacks and protect Web applications including
SSL VPN portals, SonicWALL Web Application Firewall Service applies reverse proxy analysis
of Layer 7 traffic against known signatures, denies access upon detecting Web application
malware, and redirects users to an explanatory error page. SonicWALL’s WAF also provides
the ability to plug in custom rule chains providing administrators the flexibility to do “virtual
patching” and apply granular controls in addition to SonicWALL’s signatures.
SonicWALL Virtual Assist
SonicWALL Virtual Assist is a remote support tool that enables a technician to assume control
of a customer’s PC or laptop for the purpose of providing remote technical assistance. With
the customer’s permission, the technician can gain instant access to a computer using a Web
browser, making it easy to diagnose and fix a problem remotely without the need for a
pre-installed “fat” client.
SonicWALL Virtual Access is a remote PC control tool that enables authorized end users
to gain secure remote access to their unattended Windows-based computers from anywhere.
Users simply need to install the Virtual Access agent onto a Windows PC with Internet access
and, as long as that PC has a connection to the SonicWALL SSL VPN, the user can connect to
that PC from anywhere they have an Internet connection. This is especially useful for remote
employees who have the need to connect back to a home office computer or small branch
office PC that is not normally connected to the LAN.
19
Secure Remote Access Solutions
Deployment
Type and Size of Deployment Environment
Included/Maximum Number
of Concurrent Users
Virtual Access/Virtual Assist Maximum Number of Concurrent Users
Features
SRA 1200
SRA 4200
SRA Virtual Appliance
Small organizations up to 50 employees
Mid-size organizations
up to 500 employees
Organiaations of any size
5/5025/5000/50
10
SRA 1200
2525
SRA 4200
SRA Virtual Appliance
Virtual Access
Add-onAdd-onAdd-on
Virtual Assist
Add-onAdd-onAdd-on
ViewPoint
Add-onAdd-onAdd-on
Web Application FirewallAdd-on
Add-on
Add-on
One Time Password (OTP) AuthenticationIncluded
Included
Included
Vasco Support
IncludedIncludedIncluded
RSA Support
IncludedIncludedIncluded
Citrix (ICA) Support Included
NetExtender: Support forIncluded
Multiple IP Ranges and Routes
Included
Included
Included
Included
Optional Client Certificate SupportIncluded
Included
Included
Graphical Usage MonitoringIncluded
Included
Included
Option to Create System BackupIncluded
Included
Included
Reverse Proxy: OWA PremiumIncluded
Version and Lotus Domino Access
Included
Included
RADIUS Test FunctionIncluded Included Included
Active Directory Groups SupportIncluded
Included
Included
Virtual Host/ Domain Name SupportIncluded
Included
Included
FileShares Java AppletIncluded Included Included
Diagnostics: DNS Lookup and TracerouteIncluded
SNMPv2
Included
Included
IncludedIncludedIncluded
Layer-7 Load BalancingIncluded Included Included
High Availability (HA)— Included —
SSL Hardware-Assisted Offload 20
—
Included
Depends on underlying hardware
Anti-Spam/Email and Web Security Solutions
Powerful and
easy-to-use
email threat
protection
SonicWALL Email Security
Every organization needs protection from both inbound and outbound email threats including
spam, phishing, viruses, zombies as well as compliance violations. SonicWALL Email Security
delivers a highly-effective, easy-to-use solution from 10 to 100,000 mailboxes which dramatically
reduces the time and expense of owning and managing an email security solution.
SonicWALL Email Security delivers the highest level of protection from inbound and outbound
email threats. Leveraging a unique worldwide attack identification and monitoring network
called SonicWALL Global Response Intelligent Defense (GRID) Network and combined with our
continuously innovative protection techniques, SonicWALL delivers superior protection today
and stands ready to stop the new attacks of tomorrow. Additionally, SonicWALL GRID Anti-Virus
provides integrated SonicWALL anti-virus and anti-spyware. Protection include anti-spam,
anti-phishing, anti-virus and Time-Zero technology (responsive and predictive), policy management, connection management, zombie detection, compliance and content filtering—
regulatory and corporate as well as email auditing.
With SonicWALL Email Security, administration takes less than ten minutes a week. There are no
rules to write, no scores to set, and no pulling user messages out of quarantine. Designed and built
to be intuitive and easy to use for the administrator and the end user, simplicity means quick
configuration, end user spam management, seamless integration across multiple LDAP servers,
robust reporting, automatic software updates, automatic protection updates, an integrated Junk
button and an intuitive and streamlined interface.
SonicWALL Email Security ensures peak system performance and throughput through its
unique preemptive scanning MTA and extensive Connection Management capabilities.
This results in breakthrough message analysis that is 40-290% faster than the competition.
SonicWALL Email Security is available as an appliance, Windows Software or as virtual
appliance in a VMWare® environment. Each appliance includes fully functional inbound and
outbound capabilities.
SonicWALL E-Class Email Security Solutions At-A-Glance
E-Class Email Security Appliance:
SonicWALL Email Security Appliance ES6000 and ES8300 Series
SonicWALL E-Class Email Security Appliance (ESA) ES6000 and ES8300 offers comprehensive,
effective and scalable email security for enterprise environments. This powerful yet
easy-to-manage solution combines anti-spam, anti-virus and anti-phishing capabilities
with content filtering and outbound email management, preventing leaks of confidential
information and violations of regulatory compliance laws. Its unique pre-emptive scanning
Mail Transfer Agent (MTA) offers breakthrough message analysis and industry-leading
message delivery rates, providing high-performance and enterprise-wide scalability.
E-Class Email Security Software:
SonicWALL Email Security Software – Enterprise
For enterprises that standardize on specific hardware, have existing monitoring and backup
systems or just want the ultimate in deployment flexibility, SonicWALL E-Class Email Security
Software provides all the functionality of SonicWALL E-Class Email Security appliance on
a software platform. This email security solution combines best protection with effortless
control and high-performance.
21
Anti-Spam/Email and Web Security Solutions
SonicWALL E-Class Email Security Solutions At-A-Glance
E-Class Email Security Virtual Appliance
SonicWALL Email Security Virtual Appliance – Enterprise
The SonicWALL Email Security Virtual Appliance provides a hardened, performance-optimized
virtual server for SonicWALL Email Security. In the past, under the “one server, one application”
model, administrators often underutilized hardware resources and spent considerable time on
server management. SonicWALL Virtual Appliances significantly improve the efficiency and
availability of resources and applications. To support larger deployments and scalability,
administrators can use Split-Config Mode to deploy multiple virtual appliances within a single
physical server or across multiple physical servers.
SonicWALL Anti-Spam SMB Solutions At-A-Glance
SMB Solutions Appliance: SonicWALL Email Security Appliance Series
Ideal for small- to medium-sized organizations, SonicWALL Email Security Appliances are
easy-to-install and extremely effective at stopping all email threats at the SMTP gateway. This
powerful solution protects organizations against threats including spam, phishing, viruses,
Denial-of-Service and Directory Harvest Attacks, and compromised Zombie machines. These
appliances also provide robust outbound email management for policy and regulatory
compliance. Based on a hardened SonicWALL OS, these plug-and-play appliances install in less
than an hour to securely protect your email.
Software Solutions: SonicWALL Email Security Software – Small to Medium Business
SonicWALL Email Security Software is ideal for small- to medium-sized organizations that want to
implement a software email security solution on their existing hardware. With all the available
features of the SMB appliances, SonicWALL Email Security Software secures organizations from all
inbound and outbound email threats through an easy-to-use, Web-based administrative interface.
SonicWALL Email Security for Windows® Small Business Server (SBS) is designed to install directly on
the SBS server hardware to ease installation and lower cost of ownership. It integrates with SBS to
deliver superior anti-spam, anti-phishing, and anti-virus protection, and prevents DHA, DOS attacks
using advanced connection management before mail traffic reaches SBS.
Email Security Virtual Appliance
SonicWALL Email Security Virtual Appliance
The SonicWALL Email Security Virtual Appliance provides a hardened, performance-optimized
virtual server for SonicWALL Email Security. In the past, under the “one server, one application”
model, administrators often underutilized hardware resources and spent considerable time on
server management. SonicWALL Virtual Appliances significantly improve the efficiency and
availability of resources and applications. To support larger deployments and scalability,
administrators can use Split-Config Mode to deploy multiple virtual appliances within a single
physical server or across multiple physical servers.
22
Anti-Spam/Email and Web Security Solutions
SonicWALL Email Security Services
SonicWALL Email Protection Subscription and Dynamic Support (8x5 or 24x7)
SonicWALL Email Protection Subscription and Dynamic Support is a required subscription
service for Email Security appliances and software as it completes the comprehensive
email threat protection by providing real-time anti-spam, anti-phishing and anti-virus
updates as well as software/firmware updates. The subscription includes either 8x5 or 24x7
technical support with advanced RMA for the appliance and warranty for repair or replacement
of any defective product due to manufacturer’s defects.
SonicWALL Email Anti-Virus Subscription
SonicWALL Email Anti-Virus Subscription provides protection from the time a virus
outbreak occurs until the time a signature update is available through SonicWALL Time
Zero Technology. SonicWALL provides additional layers of protection by partnering with
best-of-breed companies McAfee™ and Kaspersky Lab™ for signature updates.
SonicWALL Email Compliance Subscription
SonicWALL Email Compliance Subscription enables organizations to adhere to regulatory
compliance requirements and the implementation of best practices with email usage.
The features include detailed attachment scanning, compliance dictionaries, approval
boxes, record ID matching, encryption routing, email archiving, pre-defined policies and
compliance reports. By intelligently identifying emails that violate compliance policies,
monitoring and reporting the problem and applying multiple enforcement options,
SonicWALL can help organizations take the next step towards email compliance.
Email Security Appliances
Model
Rackmount Chassis
CPU
RAM
SMB
3300
4300
E-Class
ES6000ES8300
1RU
1RU
1U Mini
2RU
Intel 2.0GHz Intel Dual Core 2.0GHz 3.2 GHz
Quad Core Xeon
2 GB
4 GB
2 GB
4 GB
250 GB
2 x 250 GB
2x160 GB
4x750 GB
Redundant Disk Array (RAID)
No
Yes
Yes
RAID 5
Hot Swappable Drives
No
No
No
Yes
Redundant Power Supply
No
No
No
Yes
Hard drive
Email Security Software
Software Platforms
Microsoft Windows 2003 Server or Windows 2008 Server
23
Backup and Recovery Solutions
SonicWALL Continuous Data Protection (CDP) Series
SonicWALL® Continuous Data Protection (CDP) offers the only complete end-to-end backup
and recovery solution for SMBs. SonicWALL CDP takes the complexity out of safeguarding your
data by automating tedious tasks to provide a true low-touch solution, with flexible Offsite Data
Backup, Site-to-Site Data Backup, Local Archiving and Bare Metal Recovery options to address
any disaster recovery scenario. Policy-driven CDP is transparent to the end-user, ensuring that
data, applications and systems are reliably protected. Because most recovery involves a single
file, CDP’s self-directed restore helps meet service levels while reducing burden on IT support.
CDP ensures that all files are available in multiple historic versions, and that all servers and their
applications—including Exchange, SQL and Active Directory databases—are protected with
multiple-point-in-time versions for disaster recovery. With capacity up to 9 TB at typical
compression, GbE connectivity, RAID 5, and field-replaceable components, CDP is designed
to meet today’s demanding requirements for performance and reliability. CDP provides
foolproof, intuitive, continual protection. CDP ensures reliability and speeds recovery by
automatically generating email alerts on any compromised connectivity and regularly-scheduled
reports on backup activity. Extensible across multiple platforms including Windows® and
Linux®, CDP can instantly recover data, applications or entire workstation or server systems onto
original, new or virtual devices. CDP secures data using industry-standard encryption anytime
it is transmitted offsite, offering complete business information availability for servers, desktops
and mobile laptops. No other solution offers such comprehensive protection while still being
so easy-to-manage.
SonicWALL Backup and Recovery Solutions At-A-Glance
SonicWALL CDP 6080
The SonicWALL Continuous Data Protection (CDP) 6080 is ideal for medium size organizations
demanding higher performance and capacity, offering automatic disk-based backup and
recovery for multiple workstations and server applications, capacity from 4.5-9 TB (at 2:1
compression), flexible disaster recovery options, RAID 5, and replaceable drives and power
supplies. The low-touch CDP 6080 automatically enforces policy-driven, user-transparent
backups of multiple versions of files and applications—including Exchange and SQL databases.
The CDP 6080 offers flexible disaster recovery options for Local Archiving, Offsite Data Backup,
Site-to-Site Data Backup, and Bare Metal Recovery of entire systems onto original, virtual or new
Windows or Linux devices.
SonicWALL CDP 5040
The SonicWALL Continuous Data Protection (CDP) 5040 is ideal for small-to-medium size
organizations demanding high-performance and capacity. The CDP 5040 offers automatic
disk-based backup and recovery for multiple workstations and server applications, capacity
of up to 4.5 TB (at standard 2:1 compression ratios), flexible disaster recovery options, RAID 5
and replaceable drives. The low-touch CDP 5040 automatically enforces policy-driven, usertransparent backups of multiple versions of files and applications—including Exchange and
SQL databases. The CDP 5040 offers flexible disaster recovery options for Local Archiving,
Offsite Data Backup, Site-to-Site Data Backup, and Bare Metal Recovery of entire systems
onto original, virtual or new Windows or Linux devices.
24
Backup and Recovery Solutions
SonicWALL CDP 210
The SonicWALL Continuous Data Protection (CDP) 210 is ideal for small distributed
environments and remote or branch offices requiring complete end-to-end disk-based
backup and recovery for multiple workstations and servers with a capacity of up to 2 TB
(at standard 2:1 compression ratios). The low-touch CDP 210 automatically enforces policydriven, user-transparent backups of multiple versions of files and applications—including
Exchange and SQL databases. The CDP 210 offers flexible disaster recovery options for Local
Archiving, Offsite Data Backup, Site-to-Site Data Backup, and Bare Metal Recovery of entire
systems onto original, virtual or new Windows or Linux devices.
SonicWALL CDP 110
The SonicWALL Continuous Data Protection (CDP) 110 is ideal for smaller distributed
environments and remote or branch offices requiring complete end-to-end disk-based
backup and recovery for multiple workstations and servers with a capacity of up to 800 GB
(at standard 2:1 compression ratios). The low-touch CDP 110 automatically enforces policydriven, user-transparent backups of multiple versions of files and applications—including
Exchange and SQL databases. The CDP 110 offers flexible disaster recovery options for Local
Archiving, Offsite Data Backup, Site-to-Site Data Backup, and Bare Metal Recovery of entire
systems onto original, virtual or new Windows or Linux devices.
SonicWALL Backup and Recovery Licenses and Services
SonicWALL offers hands-free offsite backup and recovery solutions that store data to enable
organizations to be up and running quickly after a disaster event. Data can be transmitted to
either an offsite datacenter or to a managed CDP appliance. All data is transmitted and stored
with an AES 256-bit encryption key that is only known to the end-user. Data can be restored
directly to a CDP appliance via a simple point and click interface. SonicWALL’s dedicated
support organization will always be there to help with the recovery process as well.
SonicWALL CDP Offsite Data Backup Service
SonicWALL CDP Offsite Data Backup Service provides a fully managed offsite data solution for
hassle-free disaster protection. Data is restored directly to a CDP appliance with point and click
functionality in the event of a disaster. The datacenters feature uninterruptible power supply
(UPS) systems, emergency diesel generators, earthquake protection, redundant fire prevention,
flood control, HVAC and 24-hour on-site security.
Site-to-Site
Data Backup
SonicWALL CDP Site-to-Site Backup
SonicWALL CDP Site-to-Site Backup is for customers and resellers who want to manage their
disaster protection solution. Site-to-Site Backup allows any CDP appliance to be used for offsite
backup. A single offsite appliance can provide disaster protection for multiple downstream
CDP appliances. In the event of a disaster, data can quickly be restored to a new CDP appliance
using SonicWALL’s Enterprise Manager software.
SonicWALL CDP Bare Metal Recovery/Local Archiving
Bare Metal Recovery (BMR) software creates an exact image of an entire server or workstation,
including operating system files, programs, databases and settings. An entire system can be
recovered in minutes through an easy-to-use wizard-driven graphical user interface. Additionally,
the BMR software provides local archiving capabilities that allow organizations to store
snapshots of their data for extended periods of time to meet industry and government
compliance regulations.
25
Backup and Recovery Solutions
Feature
CDP 110
CDP 210
CDP 5040
CDP 6080
Appliance Characteristic
Form Factor
Desktop
Desktop
1U
2U
-
-
RAID 5
RAID 5
Total Capacity (Raw)
400 GB
1 TB
3 TB
3 TB (6 TB max.)
Total Capacity (Useable Uncompressed)
400 GB
1 TB
2.25 TB
2.25TB (4.5 TB max.)
Total Capacity (Useable@Typical 2:1 Compression)
800 GB
2 TB
4.5 TB
4.5 TB (9 TB max.)
100baseT
100baseT
1 GbE
1 GbE
RAID Support
Network Interface Hot-swappable and Redundant
–––Yes
Power Protection
Replaceable Hard Drive
–
–
Yes
Yes
Users (Recommended)
<15
<25
<60
<100
Servers (Recommended)
<5
<5
<10
<15
Backup and Recovery
Continuous Data Protection (CDP)
Yes
Yes
Yes
Yes
Transparent, Automated Backup Yes
Yes
Yes
Yes
User Directed Recovery
YesYesYesYes
Flexible Disaster Recovery options
Yes
Yes
Yes
Yes
Direct backup of server, laptop and desktop
Yes
Yes
Yes
Yes
Application Support – Exchange, SQL, AD
Yes
Yes
Yes
Yes
Central Administration
Enforced Policy-base Backup
Yes
Yes
Yes
Yes
Reporting and Alerting
Yes
Yes
Yes
Yes
AES 256-bit Encryption
Yes
Yes
Yes
Yes
Auto-discovery of Database for backup Yes
Yes
Yes
Yes
Disaster Recovery
Site-to-Site Backup Yes
Local Archiving
YesYesYesYes
Yes
Yes
Yes
Online Backup (Offsite Datacenter)
Yes
Yes
Yes
Yes
Bare Metal Recovery with Universal Restore
Yes
Yes
Yes
Yes
Bare Metal Recovery – Server
Yes
Yes
Yes
Yes
¹Product capacity specified in gigabytes (GB) are terabytes (TB) where 1 GB = 1,000,000,000 bytes and 1 TB = 1,000,000,000,000 bytes.
²Compressed capacity assumes 1.2:1 for standard data compression and 2:1 for enhanced data compression. Capacity may vary and is data dependent.
26
Policy and Management Solutions
Global
Management
System
SonicWALL Global Management System (GMS)
SonicWALL Global Management System (GMS®) provides organizations of any size, distributed
enterprises and service providers with a flexible, powerful and intuitive tool to centrally
manage and rapidly deploy SonicWALL firewall, anti-spam, backup and recovery, secure remote
access solutions and security policy configurations. Flexibly deployed as software, hardware—
in the form of the Universal Management Appliance (UMA)—or a virtual appliance. Organizations
can globally manage and collect detailed information from security applications such as
gateway anti-virus, anti-spyware, intrusion prevention and content filtering, all from a single
console. SonicWALL GMS also provides centralized real-time monitoring, and comprehensive
policy and compliance reporting. SonicWALL GMS’ intuitive Web-based user interface easily
allows for complete life cycle control of thousands of SonicWALL firewall, anti-spam, secure
remote access, and backup and recovery appliances and services—from initial configuration to
complex policy changes and remote updates. For enterprises, GMS simplifies the complexity of
network management by offering a single manage­ment interface, thereby reducing administration
time, complexity and the overall total cost of ownership (TCO). Service providers benefit from
its multi-organizational management capabilities where it consolidates, groups and classifies
thousands of individual customers’ managed appliances and their respective security policies.
Through an integrated reporting architecture, administrators can customize and schedule
reports individually tailored to meet the needs of managed customers, executives and regulatory
compliance audits for corporate departments.
GMS Software – SonicWALL GMS can be flexibly deployed as a software application on a third party Windows server, leveraging existing infrastructure.
n
Universal Management Appliance – The award-winning UMA, leveraging a hardened high- performance appliance, simplifies and automates multi-level policy management, monitoring and compliance reporting with flexible, powerful and intuitive tools. Multiple UMA devices, when deployed in a cluster, can scale to manage up to thousands of SonicWALL security appliances.
n
n
ViewPoint
MySonicWALL
GMS Virtual Appliance – The SonicWALL GMS Virtual Appliance provides a hardened, performance-optimized virtual appliance agent for the SonicWALL Global Management System. In the past, under the “one server, one application” model, administrators often underutilized hardware resources and spent considerable time on server management. SonicWALL Virtual Appliances significantly improve the efficiency and availability of resources and applications.
SonicWALL ViewPoint
SonicWALL ViewPoint™ is an easy-to-use Web-based reporting tool that fully compliments and
extends SonicWALL’s security products and services. Using both a customized dashboard and
a variety of historical reports, ViewPoint helps organizations of all sizes track network utilization,
monitor security activity and view Web usage. Available as software or virtual appliance, SonicWALL
ViewPoint can be deployed as a software application on a third party Windows server or as
a SonicWALL GMS Virtual Appliance in a VMware environment.
MySonicWALL
MySonicWALL delivers a convenient, centralized way to register and manage SonicWALL network
security and data protection appliances and associated services. MySonicWALL is an easy-to-use
online customer portal that enables organizations to manage their entire SonicWALL relationship
in a single location. Busy IT managers can save time by using MySonicWALL to track firmware
versions, existing software licenses and security service subscriptions.
MySonicWALL helps prevent unanticipated service expirations, which can lead to crippling and costly security breaches and business interruptions
n
MySonicWALL makes it easy for managers to renew existing security services and to
subscribe to additional levels of security and data protection
n
MySonicWALL allows customers to manage multiple discrete product installations, including network security appliances, email security appliances and data backup and recovery installations spread across the enterprise.
n
27 29
Global Support Services
Dynamic
Support
Services
SonicWALL Global Support Services
SonicWALL offers a robust portfolio of global support services that not only help keep your
network security and data backup and recovery infrastructure current, but also swiftly resolve
any problem that may occur. However that’s not enough to keep your network safe these
days. So, SonicWALL’s support services also include crucial software and firmware updates and
upgrades, the finest technical support, timely hardware replacement and access to extensive
electronic tools.
E-Class Support 24x7
Designed for customers with SonicWALL E-Class solutions, SonicWALL E-Class Support 24x7
delivers the enterprise-class support features and quality of service that enterprise organizations
require to keep their networks running smoothly and efficiently.
24x7 direct access to a team of highly-trained Senior Support Engineers for telephone, email
and Web-based technical support
n
n
Subscription to firmware updates and upgrades
n
Advance Exchange hardware replacement in the event of failure
Dynamic Support 8x5 and 24x7
Designed for customers who need continued protection through on-going firmware updates
and advanced technical support, SonicWALL Dynamic Support is available during normal
business hours, or 24x7, depending on your needs. Services include:
n
Subscription to firmware updates and upgrades
n
Access to telephone, email and Web-based technical support
n
Advance Exchange hardware replacement in the event of failure
Comprehensive Global Management System Support (CGMS Support)
For customers using SonicWALL Global Management System (GMS) to manage their distributed
networks, there’s SonicWALL Comprehensive GMS Support. This umbrella support service
delivers all the benefits of an E-Class Support 24x7 contract for every appliance managed
through a SonicWALL GMS deployment. Comprehensive GMS Support includes:
n
All the services and advantages of an E-Class Support 24x7 contract
n
Support and software updates for the GMS application itself
n
One expiration date for everything, simplifying management and administration
Focused Technical Support
Mission critical customers need mission critical support. SonicWALL Focused Technical Support
(FTS) is designed to provide our most important customers the highest-quality, most responsive
support services available in the industry. This premium support offering includes a comprehensive
suite of proactive services, all of which are managed by a designated SonicWALL Security
Engineer (SSE) who understands your technical requirements and your business.
n
n
n
30 28
A customized service for organizations who need high-end enterprise-class support
with a designated resource
Available in 8x5 (FTS Standard and Lite) or 24x7 (FTS Ultra)
Immediate access to subject matter experts (SMEs) and a fast-track into SonicWALL for
enhanced escalation and new feature processing
Professional Services
SonicWALL Remote Start-up and Configuration Service
SonicWALL Remote Start-up and Configuration Service provides businesses of all sizes with
rapid, secure configuration and deployment of their SonicWALL appliance into a new or
existing network. The remote configuration is performed by CSSA-certified technicians using
SonicWALL’s proven methodology, ensuring the solution is properly configured and ready for
deployment. The service minimizes costs associated with configuring and deploying new appliances
while enhancing productivity by freeing up valuable resources to focus on other critical needs.
With Remote Configuration Service, your SonicWALL appliance will be up and running in a
matter of hours, allowing you to realize a faster return on your SonicWALL investment.
Customer Advantage Program
SonicWALL Customer Advantage Program (CAP)
The Customer Advantage Program provides
two key mechanisms for keeping your
infrastructure up to date—Secure Upgrade
Plus and Customer Loyalty Bundle:
Secure Upgrade Plus
Whether you are upgrading older SonicWALL
appliances or trading-in products from a
competitor, Secure Upgrade Plus recognizes
your past investments and enables you to
upgrade easily and affordably. Save up to 50%
on the total annual cost of most solutions
(compared with purchasing hardware separately
and only one year of services separately).
Secure Upgrade Plus
2- or 3-year option
Service transfer (on SonicWALL upgrade only)
■ Paths for each SonicWALL product line
■
■
Upgrade
SonicWALL
Appliances
OR
Trade-in
Competitor’s
Appliance
AND...
Address other Business Needs
Customer Loyalty Bundles
■
For each Upgrade/Trade-in receive preferred pricing on
up to three different SonicWALL appliances
This option now covers all SonicWALL product categories, including Continuous Data Protection
(CDP), Email Security (ES), Secure Remote Access (SSL VPN) and Network Security/firewall (UTM)
appliances. For the complete listing of eligible SonicWALL and competitive products, see the
Secure Upgrade Program Terms and Conditions. Customers who participate in Secure Upgrade
Plus also qualify to receive preferred Customer Loyalty Bundle pricing on the purchase of
additional products.
Customer Loyalty Bundle
The SonicWALL Customer Loyalty Bundle acknowledges our customers’ trust and reflects our
commitment to them by rewarding customers who deploy multiple SonicWALL product lines.
Qualified customers can save up to 30% off MSRP on appliances from each of SonicWALL’s other
product lines. For each upgrade or trade-in purchase, customers can purchase as many as one
additional product from each of the other product lines at this preferred price. The Customer
Loyalty Bundle is available to those who participate in Secure Upgrade Plus and is available only
at the time of an upgrade or trade-in purchase.
SonicWALL designed the Customer Advantage Program to serve you better by removing the cost
and complexity of owning the most effective, up-to-date, enterprise-class network security and
data protection systems available.
29
A Vision for Dynamic Security for the Global Network
Our vision is simple: we believe security solutions should be intelligent enough to adapt as organizations evolve and as threats evolve—dynamically
and globally. We believe customers around the world should have the ability to control, manage and protect their global network easily and
automatically. We believe our customers should be able to receive and share threat and defense data around the world so they can anticipate
and stop attacks before they happen. We want our customers to be able to secure any user, any device, using any application from anywhere
so they can collaborate securely across different networks. All this needs to be achieved with maximum ease of deployment and at the best
economic value and in a compliant framework.
Built upon a shared network of millions of global touch points, Dynamic Security begins by leveraging the SonicWALL GRID Network and the
SonicWALL Threat Center that provide continuous communication, feedback, and analysis regarding the nature and changing behavior of
threats worldwide. SonicWALL Research Labs continuously processes this information, proactively delivering defenses and dynamic updates
that defeat the latest threats. Utilizing behavioral analysis, our innovative malware identification signature language can detect blended
malware to help secure organizations in advance of many of the most malicious cyber attacks.
SonicWALL further leverages technological innovation with its Reassembly-Free Deep Packet Inspection (RFDPI) technology—the foundation
for all SonicWALL network security products. By combining our single engine with a high speed, multi-core, parallel hardware architecture, we
enable simultaneous, multi-threat scanning and analysis at wire speed. Importantly, this also provides the technical framework that allows the
entire solution to scale for deployment in high bandwidth networks. Finally, by integrating advanced networking and remote access technologies,
SonicWALL verifies and defends the security of traditional and mobile wireless networks, users and applications—and their endpoint devices—
while scanning and disinfecting the entire data stream across platforms and perimeters. Along with the technological scalability, SonicWALL’s
policy and administration management scales easily as your organization grows.
More and more, customers everyday are seeing SonicWALL as the partner who understands the technology, business, social and security
challenges ahead and has the long term vision for a secure future matched with an innovative technological and business approach.
SonicWALL drives the cost and complexity out of building and running secure infrastructures, thus enabling organizations of all sizes to
achieve greater productivity and IT efficiencies.
SonicWALL’s financial, operational and technological excellence makes it the right partner to help you secure your business with Dynamic
Security for the Global Network.
Award-winning Leadership
Established in 1991, SonicWALL is the global leader of dynamic network security and data protection solutions for small, medium-sized through
large enterprise organizations. SonicWALL’s global network of strategic partners, resellers and distributors are some of the best-known names
in information technology. Earning high recognition from key industry publications, SonicWALL products have been recognized including:
Reader Trust Award: Best Policy Management Solution from SC Magazine, Security Superstars - Matt Medeiros from CRN, 2010 Best Channel
Vendor from Business Solutions Magazine and Interop Best of Show Award from Interop Tokyo.
SonicWALL Inc. has shipped over one million appliances through its global network of channel partners to keep tens of millions of worldwide
business computer users safe and in control of their data. SonicWALL’s award-winning solutions include network security, secure remote
access, Web security, backup and recovery, and policy and management technology. For more information, visit the company Web site
at http://www.sonicwall.com.
SonicWALL’s line-up of dynamic security solutions
NETWORK
SECURITY
SECURE
REMOTE ACCESS
WEB AND E-MAIL
SECURITY
BACKUP
AND RECOVERY
POLICY AND
MANAGEMENT
SonicWALL, Inc.
2001 Logic Drive, San Jose, CA 95124
T +1 408.745.9600 F +1 408.745.9300
www.sonicwall.com
©2011 SonicWALL and the SonicWALL logo is registered trademarks of SonicWALL, Inc. Dynamic Security For The Global Network is a trademark of SonicWALL, Inc. Other product names mentioned herein may be trademarks and/or registered trademarks of
their respective companies. Specifications and descriptions subject to change without notice. 01/11 SW 1025